CWE-9
J2EE Misconfiguration: Weak Access Permissions for EJB Methods
If elevated access rights are assigned to EJB methods, then an attacker can take advantage of the permissions to exploit the product.
Impactr finds and proves whether CWE-9 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.